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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1 . (Previously Presented ) A system comprising: 

a short-range ad hoc network that connects a wireless device to a nearby wireless 
device, each device including a memory device; and 

a processor disposed in communication with the memory device, the processor 
configured to: 

store an application directory in a middleware layer, the directory having at least one 
entry, each entry including an application program identifier, attributes, and security parameters; 

determine a priority for each entry in the application directory; 

identify a selected entry based on the priority; 

examine the attributes and the security parameters for the selected entry; and 

independently establish a security association to support a data communication when the 
security parameters direct the selected entry to use a secure connection. 

2. (Original) The system of claim 1, wherein the processor is further configured 

to: 

receive a connection request from the nearby wireless device; and 

send a first application directory to the nearby wireless device; 

receive a second application directory from the nearby wireless device; and 

create the application directory by combining the first application directory and the 
second application directory. 

3. (Original) The system of claim 1, wherein the attributes include a device 
identifier, a role, and control parameters. 
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4. (Original) The system of claim 3, wherein the control parameters include an 
application state, and at least one user-defined application setting. 

5. (Original) The system of claim 1 , wherein a bit-string includes the security 
parameters, a value of the bit-string representing each of the security parameters. 

6. (Original) The system of claim 1, wherein the security parameters include an 
information security objective, a cryptography method for attaining the information security 
objective, and a level of security. 

7. (Original) The system of claim 6, wherein the information security objective 
includes maintaining confidentiality, ensuring integrity, authenticating a party, and protecting 
against replay or reuse. 

8. (Original) The system of claim 6, wherein the cryptography method includes 
a signature verification service, and an encryption algorithm. 

9. (Original) The system of claim 6, wherein the level of security is a minimum 
required level of security. 

10. (Original) The system of claim 1, wherein to determine the priority for each 
entry, the processor is further configured to: 

compare the attributes for each entry in said at least one entry. 

1 1 . (Original) The system of claim 1 , wherein to establish the security 
association, the processor is further configured to: 

query a database for an existing security association between the wireless device and the 
nearby wireless device that will satisfy the security parameters; 

reuse the existing security association when the query of the database is successful; and 

create a new security association when the query of the database is unsuccessful. 
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12. (Original) The system of claim 1 1 , wherein the processor is further 
configured to: 

store the new security association in a connection log, 

wherein the query of the database includes examination of the connection log. 

1 3 . (Original) The system of claim 1 1 , wherein to reuse the existing security 
association, the processor is further configured to: 

notify the wireless device of the existing security association; 

notify the nearby wireless device of the existing security association; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the secure connection with a counterpart application program on the 
nearby wireless device. 

14. (Original) The system of claim 1 1 , wherein to create the new security 
association, the processor is further configured to: 

update the priority of the selected entry to defer the creating of the new security 
association. 

1 5 . (Original) The system of claim 1 1 , wherein to create the new security 
association, the processor is further configured to: 

establish a privileged side channel to the nearby wireless device; 

negotiate the new security association over the privileged side channel; and 

store the new security association. 
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1 6. (Original) The system of claim 15, wherein the privileged side channel 
includes a proximity-based communication means, including an infrared data association port, or 
a direct connection. 

17. (Original) The system of claim 15, wherein to negotiate the new security 
association, the processor is further configured to: 

send authentication data to the nearby wireless device; 

receive counterpart authentication data from the nearby wireless device; and 

generate the new security association based on the authentication data and the counterpart 
authentication data. 

18. (Original) The system of claim 1, wherein when the security parameters 
direct the selected entry to use a non-secure connection, the processor is further configured to: 

notify the wireless device of the non-secure connection; 

notify the nearby wireless device of the non-secure connection; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the non-secure connection with a counterpart application program on 
the nearby wireless device. 

1 9. (Original) The system of claim 1 , wherein the wireless device initiates the 
data communication. 

20. (Original) The system of claim 1, wherein the wireless device stores the 
application directory. 

2 1 . (Previously Presented) A method comprising: 

connecting a wireless device to a nearby wireless device in a short-range network 
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storing an application directory in a memory including a middleware layer, the directory 
having at least one entry, each entry including an application program identifier, attributes, and 
security parameters; 

determining a priority for each entry in the application directory; 

identifying a selected entry based on the priority; 

examining the attributes and the security parameters for the selected entry; and 

independently establishing a security association to support the data communication 
when the security parameters direct the selected entry to use a secure connection. 

22. (Original) The method of claim 2 1 , further comprising: 

receiving a connection request from the nearby wireless device; and 

sending a first application directory to the nearby wireless device; 

receiving a second application directory from the nearby wireless device; and 

creating the application directory by combining the first application directory and the 
second application directory. 

23 . (Original) The method of claim 2 1 , wherein the attributes include a device 
identifier, a role, and control parameters. 

24. (Original) The method of claim 23, wherein the control parameters include an 
application state, and at least one user-defined application setting. 

25 . (Original) The method of claim 2 1 , wherein a bit-string includes the security 
parameters, a value of the bit-string representing each of the security parameters. 

26. (Original) The method of claim 2 1 , wherein the security parameters include 
an information security objective, a cryptography method for attaining the information security 
objective, and a level of security. 
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27. (Original) The method of claim 26, wherein the information security 
objective includes maintaining confidentiality, ensuring integrity, authenticating a party, and 
protecting against replay or reuse. 

28. (Original) The method of claim 26, wherein the cryptography method 
includes a signature verification service, and an encryption algorithm. 

29. (Original) The method of claim 26, wherein the level of security is a 
minimum required level of security. 

3 0 . (Original) The method of claim 2 1 , wherein the determining of the priority 
for each entry further comprises: 

comparing the attributes for each entry in said at least one entry. 

3 1 . (Original) The method of claim 2 1 , wherein the establishing of the security 
association further comprises: 

querying a database for an existing security association between the wireless device and 
the nearby wireless device that will satisfy the security parameters; 

reusing the existing security association when the query of the database is successful; and 

creating a new security association when the query of the database is unsuccessful. 

32. (Original) The method of claim 3 1 , further comprising: 
storing the new security association in a connection log, 

wherein the query of the database includes examination of the connection log. 

3 3 . (Original) The method of claim 3 1 , wherein the reusing of the existing 
security association further comprises: 

notifying the wireless device of the existing security association; 

notifying the nearby wireless device of the existing security association; 
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launching an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicating over the secure connection with a counterpart application program on the 
nearby wireless device. 

34. (Original) The method of claim 3 1 , wherein the creating of the new security 
association further comprises: 

updating the priority of the selected entry to defer the creating of the new security 
association. 

35. (Original) The method of claim 3 1 , wherein the creating of the new security 
association further comprises: 

establishing a privileged side channel to the nearby wireless device; 

negotiating the new security association over the privileged side channel; and 

storing the new security association. 

36. (Original) The method of claim 35, wherein the privileged side channel 
includes a proximity-based communication means, including an infrared data association port, or 
a direct connection. 

37. (Original) The method of claim 35, wherein the negotiating of the new 
security association further comprises: 

sending authentication data to the nearby wireless device; 

receiving counterpart authentication data from the nearby wireless device; and 

generating the new security association based on the authentication data and the 
counterpart authentication data. 
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3 8 . (Original) The method of claim 2 1 , wherein when the security parameters 
direct the selected entry to use a non-secure connection, the method further comprises: 

notifying the wireless device of the non-secure connection; 

notifying the nearby wireless device of the non-secure connection; 

launching an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicating over the non-secure connection with a counterpart application program 
on the nearby wireless device. 

39. (Original) The method of claim 2 1 , wherein the wireless device initiates the 
data communication. 

40. (Original) The method of claim 21 , wherein the wireless device stores the 
application directory. 

41 . (Currently Amended) A computer program product, tangibly stored on a 
computer-readable medium , such as a removable disc, a hard disk drive, random access memory, 
flash memory, and read-only memory , executable in a computer system, comprising instructions 
operable to cause a programmable processor to: 

store an application directory in a memory including a middleware layer of a device in an 
ad hoc network, the directory having at least one entry, each entry including an application 
program identifier, attributes, and security parameters; 

determine a priority for each entry in the application directory; 

identify a selected entry based on the priority; 

examine the attributes and the security parameters for the selected entry; and 

independently establish a security association to support the data communication when 
the security parameters direct the selected entry to use a secure connection. 
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42 . (Original) The computer program product of claim 4 1 , further comprising 
instructions operable to cause the programmable processor to: 

receive a connection request from the nearby wireless device; and 

send a first application directory to the nearby wireless device; 

receive a second application directory from the nearby wireless device; and 

create the application directory by combining the first application directory and the 
second application directory. 

43 . (Original) The computer program product of claim 4 1 , further comprising 
instructions operable to cause the programmable processor to: 

compare the attributes for each entry in said at least one entry. 

44. (Original) The computer program product of claim 41, further comprising 
instructions operable to cause the programmable processor to: 

query a database for an existing security association between the wireless device and the 
nearby wireless device that will satisfy the security parameters; 

reuse the existing security association when the query of the database is successful; and 

create a new security association when the query of the database is unsuccessful. 

45. (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

store the new security association in a connection log, 

wherein the query of the database includes examination of the connection log. 

46. (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

notify the wireless device of the existing security association; 

notify the nearby wireless device of the existing security association; 
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launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the secure connection with a counterpart application program on the 
nearby wireless device. 

47. (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

update the priority of the selected entry to defer the creating of the new security 
association. 

48. (Original) The computer program product of claim 44, further comprising 
instructions operable to cause the programmable processor to: 

establish a privileged side channel to the nearby wireless device; 

negotiate the new security association over the privileged side channel; and 

store the new security association. 

49. (Original) The computer program product of claim 48, further comprising 
instructions operable to cause the programmable processor to: 

send authentication data to the nearby wireless device; 

receive counterpart authentication data from the nearby wireless device; and 

generate the new security association based on the authentication data and the counterpart 
authentication data. 

50. (Original) The computer program product of claim 4 1 , wherein when the 
security parameters direct the selected entry to use a non-secure connection, the computer 
program product further comprises instructions operable to cause the programmable processor 
to: 

notify the wireless device of the non-secure connection; 
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notify the nearby wireless device of the non-secure connection; 

launch an application program that is referenced by the application program identifier 
associated with the selected entry when the attributes associated with the selected entry indicate 
an accommodating state for the launch of the application program; and 

communicate over the non-secure connection with a counterpart application program on 
the nearby wireless device. 

5 1 . (Currently Amended) A system comprising: 
a memory; 

means for storing an application directory in a the memory including a middleware layer 
of a device in an ad hoc network, the directory having at least one entry, each entry including an 
application program identifier, attributes, and security parameters; 

means for determining a priority for each entry in the application directory; 
means for identifying a selected entry based on the priority; 

means for examining the attributes and the security parameters for the selected entry; and 

means for independently establishing a security association to support the data 
communication when the security parameters direct the selected entry to use a secure connection. 

52. (Original) The system of claim 5 1 , further comprising: 

means for receiving a connection request from the nearby wireless device; and 

means for sending a first application directory to the nearby wireless device; 

means for receiving a second application directory from the nearby wireless device; and 

means for creating the application directory by combining the first application directory 
and the second application directory. 

53 . (Original) The system of claim 5 1 , wherein the determining of the priority for 
each entry further comprises: 
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means for comparing the attributes for each entry in said at least one entry. 

54. (Original) The system of claim 5 1 , wherein the means for the establishing of 
the security association further comprises: 

means for querying a database for an existing security association between the wireless 
device and the nearby wireless device that will satisfy the security parameters; 

means for reusing the existing security association when the query of the database is 
successful; and 

means for creating a new security association when the query of the database is 
unsuccessful. 

55. (Original) The system of claim 54, further comprising: 
means for storing the new security association in a connection log, 
wherein the query of the database includes examination of the connection log. 

56. (Original) The system of claim 54, wherein the means for the reusing of the 
existing security association further comprises: 

means for notifying the wireless device of the existing security association; 

means for notifying the nearby wireless device of the existing security association; 

means for launching an application program that is referenced by the application program 
identifier associated with the selected entry when the attributes associated with the selected entry 
indicate an accommodating state for the launch of the application program; and 

means for communicating over the secure connection with a counterpart application 
program on the nearby wireless device. 

57. (Original) The system of claim 54, wherein the means for the creating of the 
new security association further comprises: 
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means for updating the priority of the selected entry to defer the creating of the new 
security association. 

58. (Original) The system of claim 54, wherein the means for the creating of the 
new security association further comprises: 

means for establishing a privileged side channel to the nearby wireless device; 

means for negotiating the new security association over the privileged side channel; and 

means for storing the new security association. 

59. (Original) The system of claim 58, wherein the means for the negotiating of 
the new security association further comprises: 

means for sending authentication data to the nearby wireless device; 

means for receiving counterpart authentication data from the nearby wireless device; and 

means for generating the new security association based on the authentication data and 
the counterpart authentication data. 

60. (Original) The system of claim 5 1 , wherein when the security parameters 
direct the selected entry to use a non-secure connection, further comprising: 

means for notifying the wireless device of the non-secure connection; 

means for notifying the nearby wireless device of the non-secure connection; 

means for launching an application program that is referenced by the application program 
identifier associated with the selected entry when the attributes associated with the selected entry 
indicate an accommodating state for the launch of the application program; and 

means for communicating over the non-secure connection with a counterpart application 
program on the nearby wireless device. 
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6 1 . (Previously Presented) A system comprising: 

a short-range ad hoc network that connects a wireless device to a nearby wireless device, 
each device including 

a memory device; and 

a processor disposed in communication with the memory device, the processor 
configured to: 

store in a middleware layer in the memory of the wireless device a security association 
between the wireless device and the nearby wireless device when the nearby wireless device 
enters the ad-hoc network for a first encounter; 

store a copy of the security association; 

remove the security association when the first encounter terminates; and 

independently establish a secure connection to the nearby wireless device based on the 
copy of the security association when the nearby wireless device enters the ad-hoc network for a 
second encounter. 

62. (Original) The system of claim 61, wherein the storing of the security 
association is to a short-term storage device. 

63 . (Original) The system of claim 61 , wherein the storing of the copy of the 
security association is to a long-term storage device. 

64. (Original) The system of claim 61, wherein to establish the secure connection 
to the nearby wireless device based on the copy of the security association when the nearby 
wireless device enters the ad-hoc network for the second encounter, the processor is further 
configured to: 

search a connection log to locate the copy of the security association; 

launch the application program associated with the copy of the security association; 
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configure the secure connection using the security parameters associated with the copy of 
the security association; and 

communicate over the secure connection with the counterpart application program. 

65. (Original) The system of claim 64, wherein the processor is further 
configured to: 

verify that the copy of the security association will satisfy the security parameters for the 
second encounter. 

66. (Original) The system of claim 64, wherein to search the connection log to 
locate the copy of the security association, the processor is further configured to: 

retrieve at least one previous connection from the connection log; and 
identify one of said at least one previous connection as the copy of the security 
association. 

67. (Previously Presented) A method comprising: 

storing a security association in a memory including a middleware layer between tfee-a 
wireless device and the nearby wireless device in an ad hoc network when the nearby wireless 
device enters the ad-hoc network for a first encounter; 

storing a copy of the security association; 

removing the security association when the first encounter terminates; and 

independently establishing a secure connection to the nearby wireless device based on the 
copy of the security association when the nearby wireless device enters the ad-hoc network for a 
second encounter. 

68. (Original) The method of claim 67, wherein the storing of the security 
association is to a short-term storage device. 
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69 . (Original) The method of claim 67, wherein the storing of the copy of the 
security association is to a long-term storage device. 

70. (Original) The method of claim 67, wherein the establishing of the secure 
connection to the nearby wireless device based on the copy of the security association when the 
nearby wireless device enters the ad-hoc network for the second encounter further comprises: 

searching a connection log to locate the copy of the security association; 

launching the application program associated with the copy of the security association; 

configuring the secure connection using the security parameters associated with the copy 
of the security association; and 

communicating over the secure connection with the counterpart application program. 

7 1 . (Currently Amended) The method of claim 70, further comprising: 

verify v e rifying that the copy of the security association will satisfy the security 
parameters for the second encounter. 

72. (Original) The method of claim 70, wherein the searching of the connection 
log to locate the copy of the security association further comprises: 

retrieving at least one previous connection from the connection log; and 

identifying one of said at least one previous connection as the copy of the security 
association. 

73. (Currently Amended) A computer program product, tangibly stored on a 
computer-readable mediu m, such as a removable disc, a hard disk drive, random access memory, 
flash memory, and read-only memory , executable in a computer system, for reconnecting to a 
secure connection in an ad hoc network that connects a wireless device and a nearby wireless 
device, the wireless device storing an application directory having an entry that associates an 
application program on the wireless device to a counterpart application program on the nearby 
wireless device, the entry including an application program identifier, attributes, and security 
parameters, comprising instructions operable to cause a programmable processor to: 
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store a security association in a memory of a wireless device including a middleware 
layer in an ad hoc network a security association between the wireless device and the [a] nearby 
wireless device when the nearby wireless device enters the ad-hoc network for a first encounter; 

store a copy of the security association; 

remove the security association when the first encounter terminates; and 

independently establish a secure connection to the nearby wireless device based on the 
copy of the security association when the nearby wireless device enters the ad-hoc network for a 
second encounter. 

74. (Original) The computer program product of claim 73, further comprising 
instructions operable to cause the programmable processor to: 

search a connection log to locate the copy of the security association; 
launch the application program associated with the copy of the security association; 
configure the secure connection using the security parameters associated with the copy of 
the security association; and 

communicate over the secure connection with the counterpart application program. 

75. (Original) The computer program product of claim 74, further comprising 
instructions operable to cause the programmable processor to: 

verify that the copy of the security association will satisfy the security parameters for the 
second encounter. 

76. (Original) The computer program product of claim 74, further comprising 
instructions operable to cause the programmable processor to: 

retrieve at least one previous connection from the connection log; and 

identify one of said at least one previous connection as the copy of the security 
association. 



102665 vl 



- 18- 



Serial No. 10/784,215 

Response to July 30. 2008 Office Action 



Docket No. 4208-4163 



77. (Currently Amended) A system comprising: 
a memory; 

means for storing in a the memory of a wireless device including a middleware a security 
association between the wireless device and the [a] nearby wireless device when the nearby 
wireless device enters the an ad-hoc network for a first encounter; 

means for storing a copy of the security association; 

means for removing the security association when the first encounter terminates; and 

means for independently establishing a secure connection to the nearby wireless device 
based on the copy of the security association when the nearby wireless device enters the ad-hoc 
network for a second encounter. 

78. (Original) The system of claim 77, wherein the means for establishing the 
secure connection to the nearby wireless device based on the copy of the security association 
when the nearby wireless device enters the ad-hoc network for the second encounter further 
comprises: 

means for searching a connection log to locate the copy of the security association; 
means for launching the application program associated with the copy of the security 
association; 

means for configuring the secure connection using the security parameters associated 
with the copy of the security association; and 

means for communicating over the secure connection with the counterpart application 
program. 

79. (Original) The system of claim 78, further comprising: 

means for verifying that the copy of the security association will satisfy the security 
parameters for the second encounter. 



102665 vl 



-19- 



Serial No. 10/784,215 

Response to July 30. 2008 Office Action 



Docket No. 4208-4163 



80. (Original) The system of claim 78, wherein the means for searching the 
connection log to locate the copy of the security association further comprises: 

means for retrieving at least one previous connection from the connection log; and 
means for identifying one of said at least one previous connection as the copy of the 
security association. 

8 1 . (Currently Amended) A video display including a graphical user interface 
comprising: 

a first region of a video display connected to the wireless device, the first region 
including a display list storing at least one previous connection between the wireless device and 
the nearby wireless device, 

wherein a user operates an input device connected to the wireless device to identify one 
of said at least one previous connection as a selected previous connection, and 

wherein the user operates the input device connected to the wireless device to launch the 
application program stored in a memory including a middleware layer and associated with the 
selected previous connection, configure the secure connection using the security parameters 
associated with the selected previous connection, and communicate over the secure connection 
with the counterpart application program. 

82. (Currently Amended ) The video display graphical user interface of claim 8 1 , 
wherein a memory connected to the wireless device stores a connection log that includes 
connection data, and wherein the connection data populates the display list. 

83 . (Currently Amended ) The video display graphical user interface of claim 8 1 , 
wherein to identify one of said at least at least one previous connection as the selected previous 
connection, the user selects an item in the display list by highlighting the item, displaying the 
item in reverse video, or displaying the item in a different font type, font size, or font style. 

84. (Currently Amended ) The video display graphical user interface of claim 8 1 , 
wherein the user verifies that the selected previous connection is a copy of the entry. 
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85. (Previously Presented) Apparatus, comprising: 

a first network element for storing an application directory in a memory including 
a middleware layer, the directory having at least one entry, each entry including an application 
program identifier, attributes, and security parameters; 

a second network element for determining a priority for each entry in the 
application directory; 

a third network element for identifying a selected entry based on the priority; 

a fourth network element for examining the attributes and the security parameters 
for the selected entry; and 

a fifth network element for independently establishing a security association to 
support [a] data communication when the security parameters direct the selected entry to use a 
secure connection. 

86. (Original) An apparatus comprising: 
a memory; 

a wireless network interface configured to provide a wireless connection with a nearby 
wireless device; and 

a processor disposed in communication with the memory device, the processor 
configured to: 

store an application directory in a middleware layer, the directory having at least one 
entry, each entry including at least an application program identifier, attributes, and security 
parameters; 

exchange the application directory data with the nearby wireless device over the wireless 
connection to form a distributed application directory; 

determine a priority for each entry in the distributed application directory; 

select an entry based on the priorities determined for each entry in the distributed 
application directory; 
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examine the attributes and the security parameters associated with the selected entry to 
establish a data communication for connecting with an application in the nearby device 
corresponding with the selected entry, and 

independently establish a security association to support the data communication 
connection when the selected entiy includes security parameters directing use of a secure 
connection satisfying the security parameters when connecting with the application in the nearby 
device. 

87. (Original) The apparatus of claim 86 wherein the processor is further configured to 
determine whether there already exists a security association with the nearby device that is 
compliant and meets a security level associated with the parameters of the selected entry. 
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